PatchTheCVElibmikmod vulnerabilities and fixes
Recent CVEs affecting libmikmod, with upgrade or downgrade steps. 6 tracked.
libmikmod has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2010-08-05. Highest priority: CVE-2010-2546 (score 56/100).
- CVE-2010-2971 HIGH 9.3 DOWNGRADE loaders/load_it.c in libmikmod, possibly 3.1.12, does not properly account for the larger size of name##env re
- CVE-2010-2546 HIGH 9.3 DOWNGRADE Multiple heap-based buffer overflows in loaders/load_it.c in libmikmod, possibly 3.1.12, might allow remote at
- CVE-2009-3996 HIGH 9.3 UPGRADE DOWNGRADE Heap-based buffer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod
- CVE-2009-3995 HIGH 9.3 UPGRADE DOWNGRADE Multiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and
- CVE-2009-0179 MEDIUM 4.3 DOWNGRADE libmikmod 3.1.11 through 3.2.0, as used by MikMod and possibly other products, allows user-assisted attackers
- CVE-2007-6720 MEDIUM 4.3 DOWNGRADE libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channe
FAQ
How do I fix libmikmod vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is libmikmod being exploited right now?
None of the tracked libmikmod CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which libmikmod CVE should I patch first?
CVE-2010-2546 currently ranks highest (56/100): Multiple heap-based buffer overflows in loaders/load_it.c in libmikmod, possibly 3.1.12, might allow remote at.